Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier:          BlDNpL6pYkIme9JtMU9ZOwr5lVuw6jtnkCS5QhbrG4A=
Subject key identifier:   63:9D:7D:F1:AF:AF:03:7E:BB:D1:28:2F:A6:77:21:E6:DD:26:29:78
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer:       /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial:       4D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number:          4B
Signing time:             Fri 20 Sep 2024 02:45:49 +0000
Manifest this update:     Fri 20 Sep 2024 02:45:49 +0000
Manifest next update:     Sun 22 Sep 2024 02:45:49 +0000
Files and hashes:         1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: 5DE2FF2Uuinygk8U9EGM9WJw2ZemgHxTEKlqufXJnLM=)
                          2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
                          3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Sep 2024 01:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Validity
            Not Before: Sep 20 02:45:49 2024 GMT
            Not After : Sep 22 02:45:49 2024 GMT
        Subject: CN=66ece1dd-d36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:5a:95:b1:d7:74:9b:9f:98:a2:d0:b9:8d:
                    4e:04:0f:b3:7e:33:b7:79:51:f2:9c:2f:46:cc:87:
                    93:53:c7:b2:f4:38:ba:eb:bc:11:9e:31:71:d5:3c:
                    8d:eb:c8:87:f2:5f:e8:54:be:5d:1e:f7:25:b5:79:
                    27:65:b6:ca:1d:b3:d9:89:ab:c1:0d:9e:9f:2a:da:
                    ff:90:57:c8:03:99:da:e0:54:d5:2a:fb:f2:83:a8:
                    d4:b4:b6:4b:ca:90:6d:1d:d4:d9:10:85:03:3c:a7:
                    ba:8c:ee:50:c1:44:d1:90:1b:db:ee:bb:b0:11:cf:
                    69:6b:e4:d2:f5:23:ad:d3:6e:65:bc:25:a8:3d:44:
                    b8:80:8c:0a:0c:76:ab:03:82:8c:62:0f:61:9a:78:
                    12:ce:00:a7:60:e4:1b:22:4f:25:e9:b9:44:15:16:
                    9d:f0:61:9b:6b:4a:7b:a0:c2:72:01:6c:05:1d:ce:
                    68:c8:1c:85:40:f2:70:b5:a7:16:62:d2:b2:43:0f:
                    39:2a:1b:b8:07:48:27:ee:fd:ab:14:63:02:72:7c:
                    18:63:71:73:bf:8c:cf:11:18:90:97:f1:3f:50:18:
                    69:4e:17:9f:d3:ba:ef:07:c3:5e:b4:1d:b4:09:47:
                    d0:f0:4f:b6:5b:2c:14:9b:9b:78:1f:71:b9:f8:9e:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9D:7D:F1:AF:AF:03:7E:BB:D1:28:2F:A6:77:21:E6:DD:26:29:78
            X509v3 Authority Key Identifier:
                keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:ff:ab:c6:af:33:89:dc:bd:6a:26:54:cb:10:36:f5:83:
         31:27:9e:84:7c:6f:28:a9:69:ed:eb:72:c7:4f:e3:44:d8:71:
         5c:7a:1f:2f:cd:39:40:58:18:ac:c0:84:fd:60:7e:85:95:24:
         27:84:15:d3:34:d8:b6:bc:f3:75:0d:57:33:7a:4c:23:3a:51:
         0d:88:e1:58:28:b1:82:51:2b:d9:c4:9d:af:d6:48:61:8d:f9:
         e1:27:a2:33:7f:41:2a:82:31:a9:c7:c2:af:a5:82:9e:14:a0:
         4b:1a:db:9e:73:5f:d3:0b:bc:4f:f1:68:b2:73:86:29:a9:f5:
         d4:74:8b:c3:86:1b:42:6d:2d:92:2c:41:19:8b:d4:af:3d:0e:
         24:38:ea:72:68:2c:9c:57:e4:3a:91:e9:de:34:ec:3e:67:41:
         46:d0:da:34:04:31:7c:41:7b:7f:74:86:bd:da:c2:f6:44:7e:
         e7:d4:93:d9:c2:25:15:13:68:40:cc:42:32:2e:be:ad:f3:1f:
         8b:9a:fd:bf:07:9a:cd:46:f5:14:01:37:c3:96:a2:4c:ff:8f:
         e5:7c:aa:11:3d:8b:8b:8d:d8:df:f5:4d:10:55:26:6d:c3:02:
         df:e4:5b:c3:9f:7a:83:c2:ce:e2:dd:83:9b:a8:1d:0d:46:fa:
         4f:20:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 04:39:00 2024 by rpki-client on console-ams.rpki-client.org